feat(agent): support cli tool scoped env (#37324)

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

packages/contracts/generated/api/console/agents/types.gen.ts

@@ -384,6 +384,7 @@ export type AgentCliToolConfig = {
   dangerous_command?: boolean
   description?: string | null
   enabled?: boolean
+  env?: AgentCliToolEnvConfig
   install?: string | null
   install_command?: string | null
   install_commands?: Array<string>
@@ -447,6 +448,11 @@ export type AgentCliToolAuthorizationStatus
     | 'pre_authorized'
     | 'unauthorized'
 
+export type AgentCliToolEnvConfig = {
+  secret_refs?: Array<AgentSecretRefConfig>
+  variables?: Array<AgentEnvVariableConfig>
+}
+
 export type AgentCliToolRiskLevel = 'dangerous' | 'safe' | 'unknown'
 
 export type AgentSoulDifyToolCredentialRef = {

packages/contracts/generated/api/console/agents/zod.gen.ts

@@ -471,6 +471,14 @@ export const zAgentCliToolAuthorizationStatus = z.enum([
   'unauthorized',
 ])
 
+/**
+ * AgentCliToolEnvConfig
+ */
+export const zAgentCliToolEnvConfig = z.object({
+  secret_refs: z.array(zAgentSecretRefConfig).optional(),
+  variables: z.array(zAgentEnvVariableConfig).optional(),
+})
+
 /**
  * AgentCliToolRiskLevel
  *
@@ -491,6 +499,7 @@ export const zAgentCliToolConfig = z.object({
   dangerous_command: z.boolean().optional().default(false),
   description: z.string().nullish(),
   enabled: z.boolean().optional().default(true),
+  env: zAgentCliToolEnvConfig.optional(),
   install: z.string().nullish(),
   install_command: z.string().nullish(),
   install_commands: z.array(z.string()).optional(),

packages/contracts/generated/api/console/apps/types.gen.ts

@@ -1721,6 +1721,7 @@ export type AgentCliToolConfig = {
   dangerous_command?: boolean
   description?: string | null
   enabled?: boolean
+  env?: AgentCliToolEnvConfig
   install?: string | null
   install_command?: string | null
   install_commands?: Array<string>
@@ -2015,6 +2016,11 @@ export type AgentCliToolAuthorizationStatus
     | 'pre_authorized'
     | 'unauthorized'
 
+export type AgentCliToolEnvConfig = {
+  secret_refs?: Array<AgentSecretRefConfig>
+  variables?: Array<AgentEnvVariableConfig>
+}
+
 export type AgentPermissionConfig = {
   allowed?: boolean | null
   state?: string | null

packages/contracts/generated/api/console/apps/zod.gen.ts

@@ -2285,6 +2285,14 @@ export const zAgentSoulEnvConfig = z.object({
   variables: z.array(zAgentEnvVariableConfig).optional(),
 })
 
+/**
+ * AgentCliToolEnvConfig
+ */
+export const zAgentCliToolEnvConfig = z.object({
+  secret_refs: z.array(zAgentSecretRefConfig).optional(),
+  variables: z.array(zAgentEnvVariableConfig).optional(),
+})
+
 /**
  * AgentCliToolRiskLevel
  *
@@ -2305,6 +2313,7 @@ export const zAgentCliToolConfig = z.object({
   dangerous_command: z.boolean().optional().default(false),
   description: z.string().nullish(),
   enabled: z.boolean().optional().default(true),
+  env: zAgentCliToolEnvConfig.optional(),
   install: z.string().nullish(),
   install_command: z.string().nullish(),
   install_commands: z.array(z.string()).optional(),